Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/FADBD7889A78AFB3295D84B6C512D98FE7FDB7E3.cer
File:                     FADBD7889A78AFB3295D84B6C512D98FE7FDB7E3.cer (raw, json)
Hash identifier:          Z+5LRqDVN/i6GMj94+9zgpgVRib5Tz7lhskwQfLKg8g=
Subject key identifier:   FA:DB:D7:88:9A:78:AF:B3:29:5D:84:B6:C5:12:D9:8F:E7:FD:B7:E3
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       63A61C75DCE457B9608A102D0E57A8FD05A55939
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/G5FHFXawCVaGbiCVnjkahT9FEgax4R5WwFUVtMGzaF4h/0/FADBD7889A78AFB3295D84B6C512D98FE7FDB7E3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/G5FHFXawCVaGbiCVnjkahT9FEgax4R5WwFUVtMGzaF4h/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 07 Feb 2024 17:18:00 +0000
Certificate not after:    Wed 05 Feb 2025 17:23:00 +0000
Subordinate resources:    AS: 272527
                          IP: 2804:8294::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:a6:1c:75:dc:e4:57:b9:60:8a:10:2d:0e:57:a8:fd:05:a5:59:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb  7 17:18:00 2024 GMT
            Not After : Feb  5 17:23:00 2025 GMT
        Subject: CN=FADBD7889A78AFB3295D84B6C512D98FE7FDB7E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:55:01:81:2d:94:18:b4:d1:52:e3:85:77:f8:
                    45:e7:29:bb:57:e3:48:81:64:df:25:d4:ea:4d:9d:
                    0e:8c:61:8e:00:7c:6a:f3:fb:d6:a9:db:db:81:c3:
                    da:54:a7:e9:07:51:19:54:e0:36:f5:bc:1d:98:e3:
                    fc:0f:fb:c2:a3:fe:24:84:87:ce:ff:6e:c2:a0:01:
                    2e:2c:c7:af:6d:5b:8c:35:61:98:83:b1:4a:46:bf:
                    38:c2:18:00:b7:56:26:ae:1f:f9:74:03:c5:1d:08:
                    f9:bd:ad:a4:be:aa:9a:b7:f9:94:12:76:5b:6f:d1:
                    60:5d:f7:3e:61:a3:03:79:11:8b:fe:f3:cf:a4:f0:
                    26:c3:d8:d4:c5:4d:67:11:bd:67:a8:32:db:fe:e4:
                    71:f1:03:e1:27:5a:c4:b7:fe:86:be:79:5e:76:c3:
                    a7:14:1d:da:3b:a6:24:0b:84:e3:38:1f:9f:31:44:
                    e4:e5:9d:98:74:b9:37:1e:d2:c6:8e:26:6f:03:a3:
                    50:d2:6a:c5:a6:a1:73:d7:d8:57:a5:22:f4:ab:98:
                    0e:43:df:c8:2d:54:b3:8d:67:5c:1c:ad:d3:a1:69:
                    44:a5:a0:b0:a3:b4:df:cf:8a:c3:36:18:aa:69:5c:
                    5a:e9:76:c1:5c:e7:2d:c4:1d:45:41:f3:2c:ac:e2:
                    2c:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FA:DB:D7:88:9A:78:AF:B3:29:5D:84:B6:C5:12:D9:8F:E7:FD:B7:E3
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/G5FHFXawCVaGbiCVnjkahT9FEgax4R5WwFUVtMGzaF4h/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/G5FHFXawCVaGbiCVnjkahT9FEgax4R5WwFUVtMGzaF4h/0/FADBD7889A78AFB3295D84B6C512D98FE7FDB7E3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8294::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272527

    Signature Algorithm: sha256WithRSAEncryption
         9f:4b:d8:8b:fa:40:d2:2e:1a:71:2b:95:09:d4:ab:78:ee:71:
         25:90:31:d0:84:88:95:21:8b:57:d3:cf:31:5c:74:6e:12:88:
         a1:64:0a:e1:aa:53:93:01:a8:81:2d:e5:a4:35:ec:d2:36:14:
         aa:26:13:ca:c5:51:15:e6:7b:f0:9b:2c:bd:d2:fb:d9:7a:43:
         1c:e6:65:d4:a0:46:58:fc:3b:f9:d6:33:e0:5d:cf:8a:6b:a4:
         e9:d1:ba:b5:7a:11:60:85:20:7f:4c:dc:16:f6:13:9d:23:02:
         80:dc:23:52:d4:fa:da:03:62:ed:ce:c0:06:c4:80:f9:85:b2:
         bd:af:c0:3c:ba:57:35:a4:80:02:48:a4:d9:d0:1e:01:ac:60:
         3c:48:4f:e5:ab:aa:12:f7:3a:0f:fd:73:17:15:fe:9b:46:33:
         a8:c6:d9:6b:f8:33:68:fd:c2:ef:3c:79:1d:ec:d1:a4:7e:1c:
         4a:59:8b:35:56:1c:4d:31:85:03:f4:b2:a1:e4:db:a5:8a:0e:
         66:d3:20:3a:7a:38:3d:2f:e9:4d:9b:de:88:a3:58:61:a6:57:
         e1:68:c1:fb:2b:79:d1:eb:43:c0:5b:55:5e:b7:2e:b1:b5:c1:
         0c:98:0f:ae:3e:ca:13:ce:4e:8c:e1:d2:83:00:0d:8e:45:b5:
         51:34:f2:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----